Examkin

Question

Difficulty: EasyLayer 2 Security Features (Port Security, DHCP Snooping, DAI)

A network technician configures port security on an access switch interface using the command `switchport port-security mac-address sticky`. Which TWO statements accurately describe how sticky MAC address learning operates on this interface?

  1. Dynamically learned MAC addresses are automatically added to the active running configuration file.Answer
  2. B
    Dynamically learned sticky MAC addresses are automatically written to NVRAM startup configuration without requiring manual saving.
  3. Learned sticky MAC addresses will be lost if the switch reboots before the running configuration is saved.Answer
  4. D
    Sticky MAC learning allows untrusted frame traffic to bypass Layer 2 inspection on mismatched native VLAN trunks.

Answer

Dynamically learned MAC addresses are automatically added to the active running configuration file, and learned sticky MAC addresses will be lost if the switch reboots before the running configuration is saved.
Enabling sticky MAC learning allows switch interfaces to convert dynamically learned MAC addresses into sticky MAC addresses and append them directly to the active running configuration. Because these entries reside in volatile memory, saving the running configuration to the startup configuration is required to maintain the learned addresses after a reboot.

Step-by-Step Solution

1
Analyze the function of sticky MAC address learning in Cisco IOS Port Security.
When 'mac-address sticky' is configured, the switch dynamically learns connected MAC addresses and automatically converts them into sticky entries in RAM.
Sticky MAC learning dynamically writes learned addresses into the running configuration so administrators do not have to enter them manually.
2
Determine the memory persistence of the running configuration.
The running configuration exists in volatile RAM and is erased upon device reboot unless explicitly saved to NVRAM.
To persist sticky MAC addresses across switch reboots, an administrator must execute 'copy running-config startup-config'.

Key Concept

Port Security Sticky MAC Address Dynamics and Configuration Persistence
Estimated Time:1m 0s
Rate this question

Topics

Layer 2 Security Features (Port Security, DHCP Snooping, DAI)

More questions from this topic